{
    "properties": {
        "Departments": {
            "description": "Shared: An array of dictionaries that define departments that are shown in the iOS login window. Leader: An array of dictionaries that define departments that are shown in the Classroom app.",
            "items": {
                "description": "Department Entry",
                "properties": {
                    "GroupBeaconIDs": {
                        "description": "group beacon identifiers that are members of this department.",
                        "type": "array"
                    },
                    "Name": {
                        "description": "The display name of the department.",
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "type": "array"
        },
        "DeviceGroups": {
            "description": "Leader: An array of dictionaries that define the device groups to which the leader can assign devices. This key is not included in member payloads.",
            "items": {
                "description": "Device Group Item",
                "properties": {
                    "Identifier": {
                        "description": "uniquely identifies a device group in the organization.",
                        "type": "string"
                    },
                    "Name": {
                        "description": "Will be displayed as the name of the device group, which must be unique in the organization",
                        "type": "string"
                    },
                    "SerialNumbers": {
                        "description": "strings containing the serial numbers of the devices in the group.",
                        "type": "array"
                    }
                },
                "type": "object"
            },
            "type": "array"
        },
        "Groups": {
            "description": "Shared: An array of dictionaries that define groups that the user can select in the login window.\n                    Leader: An array of dictionaries that define the groups that the user can control.\n                    Member: An array of dictionaries that define the groups of which the user is a member.\n                ",
            "items": {
                "description": "Group Entry",
                "properties": {
                    "BeaconID": {
                        "description": "unsigned 16 bit integer specifying this group\u2019s unique beacon ID.",
                        "type": "number"
                    },
                    "ConfigurationSource": {
                        "description": "the source that provided this group; e.g. iTunesU, SIS, or MDM.",
                        "type": "string"
                    },
                    "Description": {
                        "description": "The description of the group.",
                        "type": "string"
                    },
                    "DeviceGroupIdentifiers": {
                        "description": "identifier strings that refer to entries in the DeviceGroups array that are device groups to which the instructor can assign users from this class.",
                        "type": "array"
                    },
                    "ImageURL": {
                        "description": "URL of an image for the group.",
                        "type": "string"
                    },
                    "LeaderIdentifiers": {
                        "description": "user identifiers that are leaders of this group.",
                        "type": "array"
                    },
                    "MemberIdentifiers": {
                        "description": "strings that refer to entries in the Users array that are members of the group.",
                        "type": "array"
                    },
                    "Name": {
                        "description": "The display name of the group.",
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "type": "array"
        },
        "LeaderPayloadCertificateAnchorUUID": {
            "description": "An array of UUIDs referring to certificate payloads that will be used to authorize leader peer certificate identities. This array must contain all certificates needed to validate the entire chain of trust. Leader certificates must have the common name prefix leader (case insensitive).",
            "items": {
                "description": "Certificate payload that will be used to authorize leader peers",
                "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
                "type": "string"
            },
            "type": "array"
        },
        "MemberPayloadCertificateAnchorUUID": {
            "description": "An array of UUIDs referring to certificate payloads that will be used to authorize group member peer certificate identities. This array must contain all certificates needed to validate the entire chain of trust. Member certificates must have the common name prefix member (case insensitive).",
            "items": {
                "description": "Certificate payload that will be used to verify group member peers",
                "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
                "type": "string"
            },
            "type": "array"
        },
        "OrganizationName": {
            "description": "This name will be shown in the iOS login screen.",
            "type": "string"
        },
        "OrganizationUUID": {
            "description": "This can be any valid UUID. All teacher and student devices that need to communicate with one another must have the same OrganizationUUID, particularly if they originated from different Device Enrollment Programs.",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadCertificateUUID": {
            "description": "The UUID of an identity certificate payload that will be used to perform client authentication with other devices.",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadDescription": {
            "default": "Education Configuration Payload",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "Education Configuration Payload",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.education",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.education",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "UserIdentifier": {
            "description": "A unique string that identifies the user of this device within the organization.",
            "type": "string"
        },
        "Users": {
            "description": " Shared: An array of dictionaries that define the users that are shown in the iOS login window.\n                    Leader: An array of dictionaries that define users that are members of the leader\u2019s groups.\n                    Member: An array of dictionaries that must contain the definition of the user specified in the UserIdentifier key.\n                    With one-to-one member devices, this key should include only the device user and the leader but not other class members.",
            "items": {
                "description": "User Entry",
                "properties": {
                    "AppleID": {
                        "description": "the Managed Apple ID for this user.",
                        "type": "string"
                    },
                    "FamilyName": {
                        "description": "will be displayed as the family name of the user.",
                        "type": "string"
                    },
                    "FullScreenImageURL": {
                        "description": "URL pointing to an image of the user. The ResourcePayloadCertificateUUID identity certificate or the MDM client identity will be used to perform authentication when fetching the specified resource.",
                        "type": "string"
                    },
                    "GivenName": {
                        "description": "will be displayed as the given name of the user.",
                        "type": "string"
                    },
                    "Identifier": {
                        "description": "uniquely identifies a user in the organization.",
                        "type": "string"
                    },
                    "ImageURL": {
                        "description": "A string containing a URL pointing to an image of the user. This image will be displayed in the iOS login screen and in the Classroom app. The recommended resolution is 256 x 256 pixels (512 x 512 pixels on a 2x device). The recommended formats are JPEG, PNG, and TIFF. The ResourcePayloadCertificateUUID identity certificate or the MDM client identity will be used to perform authentication when fetching the image.",
                        "type": "string"
                    },
                    "Name": {
                        "description": "The display name of the user.",
                        "type": "string"
                    },
                    "PasscodeType": {
                        "description": "The passcode UI to show when the user is at the login window",
                        "enum": [
                            "complex",
                            "four",
                            "six"
                        ],
                        "type": "string"
                    }
                },
                "type": "object"
            },
            "type": "array"
        }
    },
    "title": "com.apple.education",
    "type": "object"
}